12571 matches found
Malicious code in your-types-export-file (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47fc8ae445df009de5ffc57a7e7a8a133c700db9f72c38f9c1ace0f66c562be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Template Kit – Export plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mahesh Nagabhairava Patchstack Alliance in WordPress Plugin Template Kit – Export versions = 1.0.23...
WordPress Template Kit – Export Plugin <= 1.0.23 is vulnerable to Cross Site Scripting (XSS)
Software Template Kit – Export Type Plugin Vulnerable versions = 1.0.23 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37550 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 393ac04c5e97 Credits Mahesh Nagabhairava Required...
Malware in auth0-mailchimp-export
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-37726
Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges via the Export System Info function in MSI.CentralServer.exe...
CVE-2024-37726
Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges via the Export System Info function in MSI.CentralServer.exe...
CVE-2024-37726: Improper Privilege Management
Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges via the Export System Info function in MSI.CentralServer.exe...
CVE-2024-37726
MSI Center (versions
Micro-Star International MSI Center Security Breach
Micro-Star International MSI Center is a monitoring and management platform from Micro-Star International China. You can find all your favorite features such as Game Mode or Smart Priority on the Feature Set page. A security vulnerability exists in Micro-Star International MSI Center version...
Zyxel NAS Export CGI Code Execution
The vulnerability of the export-cgi and fileupload-cgi implementations of the backup and configuration restoration functions for Zyxel NAS326 and Zyxel NAS542 network storage devices is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker to bypass...
MAL-2024-7087 Malicious code in auth0-mailchimp-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2f2ab30602da138b3668767294a045502dabcc11b0db0aa9c89dd18de4ab0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in auth0-mailchimp-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2f2ab30602da138b3668767294a045502dabcc11b0db0aa9c89dd18de4ab0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-6414 Parsec Automation TrakSYS Export Page contentpage direct request
A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS/export/contentpage of the component Export Page. The manipulation of the argument ID leads to direct request. It is possible to launch the attack remotely...
CVE-2024-6414: Direct Request
A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS/export/contentpage of the component Export Page. The manipulation of the argument ID leads to direct request. It is possible to launch the attack remotely...
Parsec Automation TrakSYS Security Vulnerability
Parsec Automation TrakSYS is an MES solution from Parsec Automation, USA. A security vulnerability exists in Parsec Automation TrakSYS version 11.x.x, which stems from the parameter ID of the file TS/export/contentpage leading to a direct request...
PT-2024-37607 · Parsec Automation · Parsec Automation Traksys
Name of the Vulnerable Software and Affected Versions: Parsec Automation TrakSYS versions 11.x.x Description: A problematic vulnerability has been found in the Export Page component of the affected software, specifically in the file TS/export/contentpage. The issue involves the manipulation of th...
GO-2024-2591 Mattermost post fetching without auditing in compliance export in github.com/mattermost/mattermost-server
Mattermost post fetching without auditing in compliance export in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to improper certificate validation. An attacker can intercept secure communications by presenting a forged certificate. Remediation Upgrade github.com/mongodb/mongo-tools/mongoexport to version 3.6.21...
Imagestream Export or Restore Fails With "error writing layer: no space left on device"
Challenge Export Action or Restore Action of OpenShift Imagestream fails with the following error: Failed to exec command in pod: command terminated with exit code 1.stdout: error writing layer: write/var/lib/image//blobs/sha256/: no space left on device Cause During the export or restore of an...